In September 2015 the Russian Data Localization Law will come into force, requiring organizations that collect personal data from individuals located in Russia to store that data within Russian territory. In this blog post, we summarize recent developments on how the law will be applied, including the unexpected publication of regulatory guidance issued by the government this week.

After many requests for compliance guidance since the law was enacted last summer, on Monday 3 August, the Ministry of Communications, the agency that oversees the Russian data protection authority which will be enforcing the law, published unofficial clarifications on its website that provide a view into how the Ministry believes organizations must comply with the law.